Hi Stef Thats right, if i make cron job run every 5min, so i will loose only 5min of data. i was not understand " You can record the difference between the 2 reads and discard negative values. " you mean to say first 5min and next 5min bytes increasing ok if not i will discard and take new values you mean. If i make the log to mysql, so it will be 24hours right is there anything i can make every 5min dump the data to Mysql using ULOG hare ----- Original Message ----- From: "Stef Coene" <stef.coene@xxxxxxxxx> To: "hare ram" <hareram@xxxxxxxxxx>; <netfilter@xxxxxxxxxxxxxxx> Cc: <lartc@xxxxxxxxxxxxxxx> Sent: Wednesday, August 27, 2003 11:11 PM Subject: Re: [LARTC] Performanace fo the Iptables Server > On Wednesday 27 August 2003 19:31, hare ram wrote: > > Hi Stef > > > > How about Source and Desitination port, and protocol wise bytes transfer ( > > like http, ftp, icmp, udp), if i want to track. > > > > next limitation, if the Server goes down, the traffic will be zero, that > > will be another Limitation > Not true. If you record the counters each 5 minutes, you loose max 5 minutes > of counters. You can record the difference between the 2 reads and discard > negative values. > > > If i send the all the traffic to Mysql, so i can get the old data to. > > > > may be you can correct me if, i may be wrong thinking > > > > correct me with the best methods to do > If you really want it very detailed (src/dst - address/port), you indeed have > to log it to mysql or so. > You can calulcate the number of updates you have to do mysql and simulate this > on a test box. > > Stef > > -- > > stef.coene@xxxxxxxxx > "Using Linux as bandwidth manager" > http://www.docum.org/ > #lartc @ irc.oftc.net > >
